Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how kelab711 ("the Company", "we", "us", "our"), the operator of the online gaming platform accessible at kelab711.cam ("the Platform"), collects, uses, stores, shares, and protects the personal data of individuals who visit, register on, or otherwise interact with the Platform ("Users", "Players", "you").

kelab711 takes your privacy seriously. We process personal data only to the extent necessary to provide our services, meet our regulatory and licensing obligations, and improve the Platform experience for players across Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam.

This Policy is incorporated by reference into our Terms & Conditions. By registering an Account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree, you must cease use of the Platform and may request closure of your Account.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, identification document number, payment details, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction, whether performed manually or by automated means.
• "Data Controller" — kelab711, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — any third party engaged by kelab711 to process personal data on its behalf under a written data processing agreement, including payment processors, KYC verification providers, and cloud infrastructure providers.
• "Consent" — a freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their personal data for one or more specified purposes.
• "KYC Data" — identity verification documents submitted by Players during the Know Your Customer process, including copies of Malaysian MyKad, passport, proof of address, and selfie photographs.
• "Cookies" — small text files placed on a User's device by the Platform to store session information, user preferences, and analytical data.

Personal Data We Collect

kelab711 collects the following categories of personal data, depending on your interaction with the Platform:

We do not knowingly collect special category data (such as health data, racial or ethnic origin, religious beliefs, or biometric data beyond facial recognition for KYC purposes) unless expressly required to do so by applicable law or regulatory authority.

How We Collect Personal Data

kelab711 collects personal data through the following mechanisms:

• Direct Submission: Information you voluntarily provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys.
• Automated Collection: Technical and usage data collected automatically via cookies, web beacons, server logs, and similar tracking technologies each time you access the Platform.
• Third-Party Sources: Identity verification data and fraud screening information received from licensed KYC and anti-money laundering service providers as part of our regulatory compliance obligations.
• Payment Processors: Confirmation data received from payment partners including FPX operators, DuitNow infrastructure providers, and e-wallet platforms (Touch 'n Go eWallet, Boost, GrabPay) upon processing of transactions.

Purposes of Data Processing

kelab711 processes your personal data for the following clearly defined purposes:

• Account Management: To create, maintain, and administer your kelab711 Account, including processing login authentication, managing account preferences, and processing account closure requests.
• Service Delivery: To provide access to casino games, live dealer tables, sports betting, Mix Parlay wagering, and all other products available on the Platform.
• Payment Processing: To process deposits in MYR via DuitNow, FPX, and e-wallets; to process withdrawal requests and confirm the identity of payment method owners; and to maintain transaction records as required by our financial and licensing obligations.
• Identity Verification (KYC): To verify your identity, age, and eligibility to use the Platform in compliance with our licensing authority's requirements. KYC is mandatory before the first withdrawal is processed.
• Anti-Fraud and AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct in accordance with applicable financial crime legislation.
• Responsible Gambling: To monitor gaming behaviour for indicators of problem gambling and to administer self-imposed limits, cooling-off periods, and self-exclusion requests in accordance with our Responsible Gambling Policy.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of communications for quality assurance and legal compliance purposes.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, improve the user interface, and develop new features based on aggregated and anonymised player data.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may withdraw this consent at any time.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and instructions from competent regulatory authorities.

Legal Basis for Processing

kelab711 processes personal data on one or more of the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and kelab711 — that is, to deliver the gaming services you have registered and paid for, and to process deposits and withdrawals in your Account.
• Legal Obligation: Processing is required to comply with applicable laws and regulatory requirements, including anti-money laundering regulations, identity verification obligations, responsible gambling mandates, and tax reporting requirements.
• Legitimate Interests: Processing is carried out in pursuit of kelab711's legitimate business interests — including fraud prevention, platform security, product improvement, and internal analytics — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not covered by the above bases — in particular for direct marketing communications and non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Data Sharing & Disclosure

kelab711 does not sell, rent, or trade your personal data to any third party. We share personal data only in the circumstances set out below, and only to the extent strictly necessary for each stated purpose:

• Licensed KYC and AML Providers: We share identity documents and identification data with regulated third-party KYC and anti-money laundering verification services for the purpose of satisfying our regulatory compliance obligations.
• Payment Processors: We share the minimum necessary financial data with our approved payment partners — including FPX network operators, DuitNow infrastructure providers, and licensed e-wallet platforms — to process deposits and withdrawals.
• Technology and Infrastructure Providers: We engage cloud hosting, cybersecurity, and software development partners who may have access to platform data in the course of providing contracted services. All such providers are bound by written data processing agreements requiring them to process data only on kelab711's instructions.
• Game Content Providers: Third-party game studios may receive limited technical data (such as session identifiers and wager amounts) as part of delivering their content on the Platform. No personally identifiable information beyond session tokens is shared with game providers.
• Regulatory Authorities and Law Enforcement: We will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where we are required to do so by law, court order, or regulatory instruction, or where disclosure is necessary to protect the rights, safety, or property of kelab711 or its players.
• Fraud Prevention Networks: In cases of confirmed or strongly suspected fraud, we may share relevant account data with licensed fraud prevention databases and industry partners to prevent further harm and protect other players.

International Data Transfers

kelab711 operates under an international gaming licence and may engage service providers and technology partners located outside Malaysia. As a result, your personal data may be transferred to and processed in countries other than Malaysia, including countries whose data protection laws may differ from those applicable in Malaysia.

Where such international transfers occur, kelab711 takes all reasonable steps to ensure that your data receives an equivalent level of protection to that which it would receive in Malaysia. Such measures include, where applicable:

• Engaging only with processors located in jurisdictions that provide an adequate level of data protection as recognised by relevant regulatory standards.
• Implementing contractual safeguards, including data processing agreements containing standard data protection clauses, with all processors operating in jurisdictions without an adequacy determination.
• Conducting due diligence on the data protection practices of international partners before engagement.

Data Retention

kelab711 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active Account is retained for the duration of the Account's existence and for a minimum period thereafter as required by our licensing authority — typically five (5) years from the date of Account closure.
• KYC Documents: Identity verification documents are retained for the period required by applicable anti-money laundering regulations, which is typically five (5) years from the date of the last transaction.
• Financial Transaction Records: Records of deposits, withdrawals, and wagering activity are retained for a minimum of five (5) years to satisfy financial reporting and audit obligations.
• Customer Support Records: Communications with our support team are retained for a period of two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution or legal proceedings.
• Marketing Consent Records: Records of consent for marketing communications are retained until consent is withdrawn, and for a period of two (2) years thereafter as evidence of consent having been obtained.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

Cookies & Tracking Technologies

kelab711 uses cookies and similar tracking technologies to operate the Platform, remember your session, personalise your experience, and gather analytical data about Platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These cookies enable session management, security token validation, and authentication. They cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Collect anonymised data about how Users navigate the Platform — which pages are visited most, how long sessions last, and where users encounter errors. This data is used in aggregate to improve the Platform.
• Functionality Cookies: Remember your preferences such as language settings, preferred display options, and previously visited sections of the Platform.
• Marketing Cookies: Track your activity on the Platform and, where consent is provided, allow us to deliver relevant promotional content aligned with your gaming preferences. These cookies are only activated upon your express consent.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. Detailed cookie information, including the specific names, providers, and expiry periods of cookies in use, is available in the cookie management interface on the Platform.

Your Rights as a Data Subject

Subject to applicable data protection legislation, you have the following rights in relation to the personal data kelab711 holds about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain Account details directly through your Account settings.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal obligations to retain certain data.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact our data protection team at the address set out in Section 16. We will respond to all verified requests within thirty (30) days. We may require you to verify your identity before processing your request.

Children's Privacy and Age Restriction

The kelab711 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory component of our KYC process, and all Accounts are subject to verification of the Account holder's date of birth using a valid government-issued identity document.

Where kelab711 becomes aware or reasonably suspects that an Account has been registered by or on behalf of a person under the age of 21, the Account will be immediately suspended, all pending transactions will be reversed to the extent possible, and the relevant personal data will be deleted in accordance with applicable law.

If you are a parent or guardian and believe that your child may have accessed or registered on the Platform, please contact our support team immediately. We will investigate and take appropriate action without delay.

Security Measures

kelab711 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS encryption. You should verify the padlock icon in your browser's address bar before entering any personal or financial data.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity documents and financial records — is encrypted at rest using strong encryption algorithms.
• Access Controls: Access to personal data within kelab711 is restricted on a strict need-to-know basis. Only personnel with a legitimate operational requirement are granted access, and all access is logged and monitored.
• Two-Factor Authentication: Two-factor authentication (2FA) is available to all kelab711 Account holders as a security measure and is strongly recommended.
• Regular Security Audits: Our Platform undergoes regular penetration testing and security audits conducted by independent third-party security specialists.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected individuals and, where required, relevant regulatory authorities within the timeframes prescribed by applicable law.

Notwithstanding the above measures, no method of data transmission over the internet or electronic storage is completely secure. While we take our security obligations seriously, kelab711 cannot guarantee absolute security. You are responsible for maintaining the security of your Account credentials and for notifying us immediately if you suspect unauthorised access to your Account.

Third-Party Links

The kelab711 Platform does not contain links to third-party websites except as may be necessary to facilitate payment transactions through our approved payment partners. To the extent that any third-party service is accessed in connection with a Platform transaction, those third parties operate under their own privacy policies and kelab711 has no responsibility for the data practices of those third parties.

We encourage you to review the privacy policy of any third-party service you interact with, including the privacy practices of your payment provider (whether that is Maybank, CIMB Bank, Touch 'n Go eWallet, Boost, GrabPay, or another partner), before providing them with any personal information.

Amendments to This Policy

kelab711 reserves the right to revise this Privacy Policy at any time. Where amendments are material — in particular, where they affect the nature of data we collect, the purposes for which we process it, or the rights available to you — we will provide advance notice by publishing the updated Policy on the Platform and, where practicable, by notifying registered Players via email.

The "Last Updated" date displayed at the top of this page reflects the date on which the most recent version came into effect. We encourage you to review this Policy periodically to remain informed of any changes. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

If any amendment materially diminishes your rights under this Policy, we will seek your fresh consent before processing your data under the amended terms where consent is the applicable legal basis.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by kelab711, please contact our data protection team through the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, directly within the Platform
• Languages: English, Bahasa Melayu, Chinese (Mandarin)
• Response Time: Data subject requests will be acknowledged within 3 business days and fully responded to within 30 calendar days

For formal data subject access requests, erasure requests, or complaints regarding our data processing practices, please send a written request to our support email with the subject line "Data Privacy Request". Please include your full registered name, Account username, and a description of your request. We may request additional information to verify your identity before processing your request.

This Privacy Policy was last reviewed and updated on 1 January 2026. By continuing to use kelab711, you acknowledge that you have read this Policy in full and consent to the data practices described herein.